implemented JWT Part 2

Author: hardikmashru

swift-sdk.xcodeproj/project.pbxproj

@@ -403,6 +403,8 @@
 		BA2BB81A2BADD5A500EA0229 /* PrivacyInfo.xcprivacy in Resources */ = {isa = PBXBuildFile; fileRef = BA2BB8182BADD5A500EA0229 /* PrivacyInfo.xcprivacy */; };
 		E9BF47962B46D5DC0033DB69 /* IterableEmbeddedView.swift in Sources */ = {isa = PBXBuildFile; fileRef = E9BF47952B46D5DC0033DB69 /* IterableEmbeddedView.swift */; };
 		E9BF47982B46DEB30033DB69 /* IterableEmbeddedView.xib in Resources */ = {isa = PBXBuildFile; fileRef = E9BF47972B46DEB30033DB69 /* IterableEmbeddedView.xib */; };
+		E9FF7FD12BFCBD90000409ED /* AuthFailure.swift in Sources */ = {isa = PBXBuildFile; fileRef = E9FF7FD02BFCBD90000409ED /* AuthFailure.swift */; };
+		E9FF7FD32BFCBDB9000409ED /* AuthFailureReason.swift in Sources */ = {isa = PBXBuildFile; fileRef = E9FF7FD22BFCBDB9000409ED /* AuthFailureReason.swift */; };
 /* End PBXBuildFile section */
 
 /* Begin PBXContainerItemProxy section */
@@ -807,6 +809,8 @@
 		BA2BB8182BADD5A500EA0229 /* PrivacyInfo.xcprivacy */ = {isa = PBXFileReference; lastKnownFileType = text.xml; path = PrivacyInfo.xcprivacy; sourceTree = "<group>"; };
 		E9BF47952B46D5DC0033DB69 /* IterableEmbeddedView.swift */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.swift; path = IterableEmbeddedView.swift; sourceTree = "<group>"; };
 		E9BF47972B46DEB30033DB69 /* IterableEmbeddedView.xib */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = file.xib; path = IterableEmbeddedView.xib; sourceTree = "<group>"; };
+		E9FF7FD02BFCBD90000409ED /* AuthFailure.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AuthFailure.swift; sourceTree = "<group>"; };
+		E9FF7FD22BFCBDB9000409ED /* AuthFailureReason.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AuthFailureReason.swift; sourceTree = "<group>"; };
 /* End PBXFileReference section */
 
 /* Begin PBXFrameworksBuildPhase section */
@@ -1063,6 +1067,8 @@
 				AC3C10F8213F46A900A9B839 /* IterableLogging.swift */,
 				ACA8D1A221910C66001B1332 /* IterableMessaging.swift */,
 				AC78F0E6253D7F09006378A5 /* IterablePushNotificationMetadata.swift */,
+				E9FF7FD02BFCBD90000409ED /* AuthFailure.swift */,
+				E9FF7FD22BFCBDB9000409ED /* AuthFailureReason.swift */,
 			);
 			path = "swift-sdk";
 			sourceTree = "<group>";
@@ -2117,6 +2123,7 @@
 				551FA7582988A8FC0072D0A9 /* IterableEmbeddedManagerProtocol.swift in Sources */,
 				AC776DA6211A1B8A00C27C27 /* IterableRequestUtil.swift in Sources */,
 				55DD2053269FA28200773CC7 /* IterableInAppManagerProtocol.swift in Sources */,
+				E9FF7FD32BFCBDB9000409ED /* AuthFailureReason.swift in Sources */,
 				ACEDF41D2183C2EC000B9BFE /* Pending.swift in Sources */,
 				552A0AA7280E1FDA00A80963 /* DeepLinkManager.swift in Sources */,
 				E9BF47962B46D5DC0033DB69 /* IterableEmbeddedView.swift in Sources */,
@@ -2149,6 +2156,7 @@
 				AC347B5C20E5A7E1003449CF /* APNSTypeChecker.swift in Sources */,
 				ACD2B84F25B15CFA005D7A90 /* RequestSender.swift in Sources */,
 				AC3A336D24F65579008225BA /* RequestProcessorUtil.swift in Sources */,
+				E9FF7FD12BFCBD90000409ED /* AuthFailure.swift in Sources */,
 				55DD2041269FA24400773CC7 /* IterableInAppMessage.swift in Sources */,
 				AC8E7CA524C7555E0039605F /* CoreDataUtil.swift in Sources */,
 				AC1AA1C624EBB2DC00F29C6B /* IterableTaskRunner.swift in Sources */,

swift-sdk/AuthFailure.swift

@@ -0,0 +1,33 @@
+//
+//  AuthFailure.swift
+//  swift-sdk
+//
+//  Created by HARDIK MASHRU on 21/05/24.
+//  Copyright © 2024 Iterable. All rights reserved.
+//
+
+import Foundation
+@objc public class AuthFailure: NSObject {
+
+    /// userId or email of the signed-in user
+    public let userKey: String?
+
+    /// the authToken which caused the failure
+    public let failedAuthToken: String?
+
+    /// the timestamp of the failed request
+    public let failedRequestTime: Int
+
+    /// indicates a reason for failure
+    public let failureReason: AuthFailureReason
+
+    public init(userKey: String?,
+                failedAuthToken: String?,
+                failedRequestTime: Int,
+                failureReason: AuthFailureReason) {
+        self.userKey = userKey
+        self.failedAuthToken = failedAuthToken
+        self.failedRequestTime = failedRequestTime
+        self.failureReason = failureReason
+    }
+}

swift-sdk/AuthFailureReason.swift

@@ -0,0 +1,23 @@
+//
+//  AuthFailureReason.swift
+//  swift-sdk
+//
+//  Created by HARDIK MASHRU on 21/05/24.
+//  Copyright © 2024 Iterable. All rights reserved.
+//
+
+import Foundation
+@objc public enum AuthFailureReason: Int {
+    case authTokenExpired
+    case authTokenGenericError
+    case authTokenExpirationInvalid
+    case authTokenSignatureInvalid
+    case authTokenFormatInvalid
+    case authTokenInvalidated
+    case authTokenPayloadInvalid
+    case authTokenUserKeyInvalid
+    case authTokenNull
+    case authTokenGenerationError
+    case authTokenMissing
+    case authTokenInvalid
+}

swift-sdk/Internal/AuthManager.swift

@@ -102,7 +102,7 @@ class AuthManager: IterableAuthManagerProtocol {
         pendingAuth = false
 
         guard retrievedAuthToken != nil else {
-            delegate?.onTokenRegistrationFailed("auth token was nil, scheduling auth token retrieval in 10 seconds")
+            handleAuthFailure(failedAuthToken: nil, reason: .authTokenNull)
 
             /// by default, schedule a refresh for 10s
             scheduleAuthTokenRefreshTimer(10)
@@ -119,13 +119,17 @@ class AuthManager: IterableAuthManagerProtocol {
         onSuccess?(authToken)
     }
 
+    func handleAuthFailure(failedAuthToken: String?, reason: AuthFailureReason) {
+        delegate?.onAuthFailure(AuthFailure(userKey: IterableUtil.getEmailOrUserId(), failedAuthToken: failedAuthToken, failedRequestTime: IterableUtil.secondsFromEpoch(for: dateProvider.currentDate), failureReason: reason))
+    }
+    
     private func queueAuthTokenExpirationRefresh(_ authToken: String?) {
         ITBInfo()
 
         clearRefreshTimer()
 
         guard let authToken = authToken, let expirationDate = AuthManager.decodeExpirationDateFromAuthToken(authToken) else {
-            delegate?.onTokenRegistrationFailed("auth token was nil or could not decode an expiration date, scheduling auth token retrieval in 10 seconds")
+            handleAuthFailure(failedAuthToken: authToken, reason: .authTokenPayloadInvalid)
 
             /// schedule a default timer of 10 seconds if we fall into this case
             scheduleAuthTokenRefreshTimer(10)

swift-sdk/Internal/IterableUtil.swift

@@ -51,6 +51,17 @@ import UIKit
     static func secondsFromEpoch(for date: Date) -> Int {
         Int(date.timeIntervalSince1970)
     }
+    
+    static func getEmailOrUserId() -> String? {
+        let email = IterableAPI.email
+        let userId = IterableAPI.userId
+        if email != nil {
+            return email
+        } else if userId != nil {
+            return userId
+        }
+        return nil
+    }
 
     // given "var1", "val1", "var2", "val2" as input
     // this will return "var1: val1, var2: val2"

swift-sdk/Internal/RequestProcessorUtil.swift

@@ -18,6 +18,7 @@ struct RequestProcessorUtil {
         .onError { error in
             if error.httpStatusCode == 401, error.iterableCode == JsonValue.Code.invalidJwtPayload {
                 ITBError("invalid JWT token, trying again: \(error.reason ?? "")")
+                authManager?.handleAuthFailure(failedAuthToken: authManager?.getAuthToken(), reason: getMappedErrorCodeForMessage(error.reason ?? ""))
                 authManager?.requestNewAuthToken(hasFailedPriorAuth: false) { _ in
                     requestProvider().onSuccess { json in
                         reportSuccess(result: result, value: json, successHandler: onSuccess, identifier: identifier)
@@ -51,6 +52,7 @@ struct RequestProcessorUtil {
         }.onError { error in
             if error.httpStatusCode == 401, error.iterableCode == JsonValue.Code.invalidJwtPayload {
                 ITBError(error.reason)
+                authManager?.handleAuthFailure(failedAuthToken: authManager?.getAuthToken(), reason: getMappedErrorCodeForMessage(error.reason ?? ""))
                 authManager?.requestNewAuthToken(hasFailedPriorAuth: true, onSuccess: nil)
             } else if error.httpStatusCode == 401, error.iterableCode == JsonValue.Code.badApiKey {
                 ITBError(error.reason)
@@ -76,6 +78,30 @@ struct RequestProcessorUtil {
         }
         result.resolve(with: value)
     }
+    
+    private static func getMappedErrorCodeForMessage(_ reason: String) -> AuthFailureReason {
+        
+        switch reason.lowercased() {
+            case "exp must be less than 1 year from iat":
+                return .authTokenExpirationInvalid
+            case "jwt format is invalid":
+                return .authTokenFormatInvalid
+            case "jwt token is expired":
+                return .authTokenExpired
+            case "jwt is invalid":
+                return .authTokenSignatureInvalid
+            case "jwt payload requires a value for userid or email", "email could not be found":
+                return .authTokenUserKeyInvalid
+            case "jwt token has been invalidated":
+                return .authTokenInvalidated
+            case "invalid payload":
+                return .authTokenPayloadInvalid
+            case "jwt authorization header is not set":
+                return .authTokenMissing
+            default:
+            return .authTokenInvalid
+        }
+    }
 
     private static func reportFailure(result: Fulfill<SendRequestValue, SendRequestError>,
                                       error: SendRequestError,

swift-sdk/IterableAuthManagerProtocol.swift

@@ -10,4 +10,5 @@ import Foundation
     func requestNewAuthToken(hasFailedPriorAuth: Bool, onSuccess: ((String?) -> Void)?)
     func setNewToken(_ newToken: String)
     func logoutUser()
+    func handleAuthFailure(failedAuthToken: String?, reason: AuthFailureReason)
 }

swift-sdk/IterableConfig.swift

@@ -55,7 +55,7 @@ import Foundation
 /// The delegate for getting the authentication token
 @objc public protocol IterableAuthDelegate: AnyObject {
     @objc func onAuthTokenRequested(completion: @escaping AuthTokenRetrievalHandler)
-    @objc func onTokenRegistrationFailed(_ reason: String?)
+    @objc func onAuthFailure(_ authFailure: AuthFailure)
 }
 
 /// Iterable Configuration Object. Use this when initializing the API.

tests/common/MockAuthManager.swift

@@ -9,6 +9,11 @@ import Foundation
 @testable import IterableSDK
 
 class MockAuthManager: IterableAuthManagerProtocol {
+    
+    func handleAuthFailure(failedAuthToken: String?, reason: IterableSDK.AuthFailureReason) {
+        
+    }
+    
     var shouldRetry = true
     var retryWasRequested = false
 

tests/unit-tests/AuthTests.swift

@@ -679,7 +679,7 @@ class AuthTests: XCTestCase {
                 }
             }
 
-            func onTokenRegistrationFailed(_ reason: String?) {
+            func onAuthFailure(_ authFailure: AuthFailure) {
 
             }
         }
@@ -711,7 +711,7 @@ class AuthTests: XCTestCase {
                 completion(AuthTests.authToken)
             }
 
-            func onTokenRegistrationFailed(_ reason: String?) {
+            func onAuthFailure(_ authFailure: AuthFailure) {
 
             }
         }
@@ -762,7 +762,7 @@ class AuthTests: XCTestCase {
                 }
             }
 
-            func onTokenRegistrationFailed(_ reason: String?) {
+            func onAuthFailure(_ authFailure: AuthFailure) {
 
             }
         }
@@ -900,7 +900,7 @@ class AuthTests: XCTestCase {
             completion(authTokenGenerator())
         }
 
-        func onTokenRegistrationFailed(_ reason: String?) {
+        func onAuthFailure(_ authFailure: AuthFailure) {
 
         }
     }